skip to content

#Malware

6 posts

MotW, SmartScreen and how to bypass it using good old DLL Hijacks

2026-06-26 #Malware #Research

How Mark of the Web and Defender SmartScreen try to stop phishing payloads, and why sideloading an unsigned DLL next to a signed, reputable binary walks straight past both.

ESET Wiper - Hey ESET, wait for the leak..

2024-10-19 #Malware #Reverse Engineering

I've reversed engineered the ESET Wiper targeting ESET's exclusive partner in Israel to send phishing emails to Israeli businesses. See this article on bleepingcomputer.com.

Zero2Automated Advanced Malware Analysis Course - Certification

2024-05-24 #Zero2Automated #Malware #Reverse Engineering

I've done the Zero2Automated Advanced Malware Analysis Course over the last few months and have now finally passed the exam!

Hiding between opcode bytes - GUloader-like string obfuscation in Rust

2024-03-30 #Obfuscation #Malware #Reverse Engineering

I recently came across the GULoader malware family with its string obfuscation and wondered if one can build a similar technique in Rust.

Zero2Automated - Custom Sample

2024-01-29 #Reverse Engineering #Write-up #Malware #Windows

My write-up for the first custom sample of the zero2automated course.

Writing a simple self-injecting packer

2024-01-07 #Malware #Evasion #Windows

Writing a simple self-injecting packer for evading Windows Defender detection.